Fortinet FortiWeb Security Vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. Fortinet FortiWeb has a security...

Fortinet FortiVoice Security Vulnerability

Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet, Inc. Fortinet FortiWLM has an operating system command injection vulnerability that stems from the presence of operating system command injection. An attacker could execute unauthorized code or commands via specially crafted http get request...

Fortinet FortiPortal 安全漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. A command injection vulnerability exists in Fortinet FortiPortal, which can be exploited b...

Fortinet FortiProxy 格式化字符串错误漏洞

Fortinet FortiProxy is a secure network proxy from Fortinet that protects employees from cyberattacks by combining multiple detection technologies such as Web filtering, DNS filtering, DLP, anti-virus, intrusion prevention, and advanced threat protection.FortiProxy helps reduce bandwidth...

PT-2023-7685 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to an improper neutralization of special elements used in an os command, also known as 'os command injection'. This allows an attacker to execute unauthorized co...

PT-2023-7754 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb versions 6.2.0 through 6.2.8 Fortinet FortiWeb versions 6.3.0 through 6.3.23 Fortinet FortiWeb versions 7.0.0 through 7.0.9 Fortinet FortiWeb versions 7.2.0 through 7.2.5 Fortinet FortiWeb version 7.4.0 Description: The issu...

The vulnerability of the Fortinet FortiClient security tool for Windows lies in its use of pre-installed user accounts, which allows a hacker to circumvent security restrictions.

The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of pre-installed user accounts. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...

Fortinet FortiSIEM Remote Unauthenticated OS Command Injection (FG-IR-23-130)

The version of Fortinet FortiSIEM running on the remote server is 6.4.x 6.4.3, 6.5.x 6.5.2, 6.6.x 6.6.4, 6.7.x 6.7.6, or 7.0.0. It is, therefore, affected by an OS command injection vulnerability that can allow a remote unauthenticated attacker to execute unauthorized commands via crafted API...

The vulnerability of the Fortinet FortiOS operating system, related to the redirection of URLs to unreliable websites, allows attackers to execute arbitrary code.

The vulnerability of the Fortinet FortiOS operating system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Fortinet FortiSIEM OS Command Injection in Report Server (FG-IR-23-135)

The version of Fortinet FortiSIEM running on the remote server is 4.7.x, 4.9.x, 4.10.x, 5.0.x, 5.1.x, 5.2.x, 5.3.x, or 5.4.x. It is, therefore, affected by an OS command injection vulnerability that can allow a remote unauthenticated attacker to execute unauthorized commands via crafted API...

The vulnerability of the Fortinet FortiClient security device for Windows, related to the use of an insecure search path, allows attackers to execute arbitrary code.

The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of an insecure lookup path. Exploiting this vulnerability allows attackers to execute arbitrary code by replacing the legitimate DLL file with a malicious library...

Fortinet FortiSIEM Web Interface Detection

Binary data fortinetfortisiemwebdetect.nbin...

CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added three security flaws to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation in the wild. The vulnerabilities are as follows - CVE-2023-36584 CVSS score: 5.4 - Microsoft Windows...

Fortinet FortiWLM Path Traversal Vulnerability (CNVD-2025-00417)

Fortinet FortiWLM is a wireless manager from Fortinet, Inc. Fortinet FortiWLM suffers from a path traversal vulnerability that stems from the program failing to properly filter for special elements in the path of a resource or file. An attacker could use this vulnerability to read arbitrary files...

Fortinet FortiSIEM Command Execution Vulnerability (CNVD-2024-13756)

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM suffers from a command execution vulnerability that stem...

Fortinet FortiADC Access Control Error Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC suffers from an Access Control Error vulnerability that stems from improper access control. An authenticated, low-privileged attacker could exploit the vulnerability to escalate their privileges to...

Fortinet FortiMail Authentication Error Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. An authentication error vulnerability exists in Fortinet FortiMail that stems from improperly limiting excessive authentication attempts. A...

Fortinet FortiSIEM Information Disclosure Vulnerability (CNVD-2023-98186)

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM has an information disclosure vulnerability that...

Fortinet FortiWAN Path Traversal Vulnerability

Fortinet FortiWAN is a network appliance from Fortinet, Inc. It is used to perform load balancing and fault tolerance between different networks. A path traversal vulnerability exists in Fortinet FortiWAN, which stems from improperly restricting pathnames to restricted directories, and can be...